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Claims 

1. A system enabling individual organizations of a plurality of different organizations 
to manage access of employees to at least one remotely located application hosted by an 
application service provider, comprising: 

5 at least one database containing data representing, 

a plurality of user interface images associated with a corresponding plurality of 
organizations, and 

a plurality of executable procedures associated with the corresponding 
plurality of user interface images, an executable procedure supporting a user of a particular 
10 organization in managing access of employees of the particular organization to an application 
hosted by an application service provider; and 

a command processor employing the at least one database for initiating execution of a 
particular executable procedure in response to a command initiated using a particular user 
interface image associated with the particular executable procedure and with the particular 
15 organization, the particular executable procedure supporting the user in managing access of 
an employee of the particular organization to an application. 

2. A system according to claim 1, including 

an authorization processor for authorizing access of the user to the particular user 
20 interface image and the associated particular executable procedure in response to received 
identification information of the user. 

3. A system according to claim 2, wherein 

the authorization processor excludes access of the user and employees of the particular 
25 organization to user interface images and executable procedures and data associated with 
organizations other than the particular organization. 

4. A system according to claim 3, wherein 

the authorization processor excludes access of the user and employees of the particular 
30 organization to data associated with organizations other than the particular organization by 
removing permission of the user and employees of the particular organization to access the 
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data associated with the other organizations from a directory of permissions used to control 
data access. 

5. A system according to claim 4, wherein 

5 the directory of permissions comprises a Microsoft compatible Active Control List 

(ACL). 

6. A system according to claim 4, wherein 

the authorization processor removes the permission of the user and employees of the 
10 particular organization in response to addition of the particular organization as a new 
organization to the plurality of organizations. 

7. A system according to claim 1, wherein 

the plurality of executable procedures comprises a plurality of sets of executable 
15 procedures associated with the corresponding plurality of user interface images and 

the command processor employs the at least one database for initiating execution of a 
particular executable procedure in a particular set of executable procedures in response to a 
command initiated using the particular user interface image. 

20 8. A system according to claim 1, wherein 

an executable procedure enables the user to at least one of, (a) add an employee and 
(b) remove an employee, of an organization as a user entitled to access the application hosted 
by the application service provider. 



25 



9. A system according to claim 8, wherein 

the executable procedure changes authorization information associated with the added 
or removed employee. 
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10. A system according to claim 1 , wherein 

an executable procedure enables the user to amend information used in authorizing a 
particular employee of an organization to access the application hosted by the application 
service provider. 

5 

11. A system according to claim 1, including 

an authorization processor for authorizing access of the employee of the particular 
organization to the particular user interface image and the associated particular executable 
procedure in response to received employee identification information. 

10 

12. A system according to claim 1 1, wherein 

the authorization processor uses a combination of an organization specific identifier 
and received employee identification information in providing an employee access to the 
application hosted by the application service provider to prevent replication of user 
15 identification information between two employees of different organizations of the plurality 
of organizations. 

13. A system according to claim 1, wherein 

an executable procedure comprises processor executable instruction in a computer 
20 language including at least one of, (a) assembly language, (b) machine code, (c) a compiled 
computer language, (d) an interpreted computer language, (e) a compilable computer 
language, (f) a script language and (g) hardware encoded logic. 

14. A system according to claim 1, wherein 

25 the particular executable procedure comprises a template procedure customized by at 

least one of, (a) the user and (b) a technician. 

15. A system according to claim 1, wherein 

at least one of, (a) the command is initiated at a user site via a particular user interface 
30 image communicated to the user site and (b) the particular executable procedure is 
communicated to a user site and executed at the user site. 
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16. A system enabling an individual organization of a plurality of different 
organizations to manage access of employees to at least one remotely located application 
hosted by an application service provider, comprising: 

a communication processor for accessing at least one database containing data 

representing, 

a plurality of user interface images associated with a corresponding plurality of 
organizations, and 

a plurality of executable procedures associated with the corresponding 
plurality of user interface images, an executable procedure supporting a user of a particular 
organization in managing access of employees of the particular organization to an application 
hosted by an application service provider; and 

a command processor for using the communication processor in initiating execution 
of a particular executable procedure in response to a command initiated at a user site using a 
particular user interface image communicated to the user site, the particular user interface 
image being associated with the particular executable procedure and with the particular 
organization, the particular executable procedure supporting the user in managing access of 
an employee of the particular organization to an application. 

17. A system enabling individual organizations of a plurality of different organizations 
to manage access of employees to at least one remotely located application hosted by an 
application service provider, comprising: 

at least one database containing data representing, 

a plurality of user interface images associated with a corresponding plurality of 

organizations, and 

a plurality of executable procedures associated with the corresponding 
plurality of user interface images, an executable procedure supporting a user of a particular 
organization in managing access of employees of the particular organization to an application 
hosted by an application service provider; and 

an authorization processor for authorizing access of the user to a particular user 
interface image and an associated particular executable procedure associated with the 
particular organization in response to received identification information of the user and 
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excluding access of the user and employees of the particular organization to user interface 
images and executable procedures and data associated with organizations other than the 
particular organization. 

5 18. A system according to claim 17, wherein 

the authorization processor authorizes access of the user in response to a command 
initiated-using the particular -user interface image. 

19. A user interface system enabling individual organizations of a plurality of different 
10 organizations to manage access of employees to at least one remotely located application 
hosted by an application service provider, comprising: 

at least one database containing data representing, 

a plurality of sets of user interface images associated with a corresponding 

plurality of organizations, and 
15 a plurality of executable procedures associated with the corresponding 

plurality of sets of user interface images, an executable procedure supporting a user of a 

particular organization in managing access of employees of the particular organization to an 

application hosted by an application service provider; and 

a command processor employing the at least one database for initiating execution of a 
20 particular executable procedure in response to a command initiated using a user interface 

image selected from a set of images associated with a particular organization, the particular 

executable procedure supporting the user in managing access of an employee of the particular 

organization to an application. 



